Privacy Policy
What is a Privacy Policy?
Pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union, L 119, p. 1) (hereinafter: GDPR), we would like to inform you that:
Due to the nature of the business, Newstone Partners Group with its registered office in Warsaw takes special care to protect your personal data. This privacy policy sets out the details of our processing of your personal data that may be collected when visiting our website www.newstonepartners.com.
We carefully select and apply appropriate technical measures, in particular programming and organisational measures, to ensure protection of the personal data we process. Our website uses encrypted data transmission (SSL), which ensures protection of your identity.
Who is the administrator of the website: www.newstonepartners.com?
The administrator of the www.newstonepartners.com website is Piotr Pietrasik, conducting business activity under the business name Newstone Partners Group Piotr Pietrasik, entered to the Central Registration and Information on Economic Activity (CEIDG) maintained by the Minister of Development, with its registered office in Pruszków, at ul. Mikołaja Kopernika 17 lok. 24, 05–800 Pruszków, Poland, Taxpayer Identification (NIP) Number: 5341564373, National Official Register of Business Entities (REGON) Number: 011642170 (hereinafter: We).
Personal Data
What legal act governs the processing of your personal data?
Your personal data are collected and processed by us in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as GDPR. In the scope not regulated by the GDPR, the processing of personal data is governed by the Personal Data Protection Act of 10 May 2018.
Who is the controller of your personal data?
The controller of your personal data is Piotr Pietrasik, conducting business activity under the business name Newstone Partners Group Piotr Pietrasik, entered to the Central Registration and Information on Economic Activity (CEIDG) with its registered office in Pruszków, at ul. Mikołaja Kopernika 17 lok. 24, 05–800 Pruszków, Poland, NIP: 5341564373, REGON: 011642170.
You can contact us about your personal data using the following methods:
- e-mail: rodo@newstonepartners.com
- traditional mail: Żwirki i Wigury Street 16a, 02-092 Warsaw, Poland
- by phone: +48 22 166 15 81
What personal data do we process and for what purposes?
On our website we offer a variety of services as part of which we process different personal data on different legal grounds.
| Objective | Personal data | Legal basis for processing | Data retention time |
|---|---|---|---|
| Contact form | Name, e-mail address | Article 6(1)(f) of the GDPR — processing for the purpose of pursuing our legitimate interest in maintaining the continuity of communication and enabling contact with us in matters of business activity. | Until you object to the processing of your personal data |
| Traffic analysis on the internet service website | IP number, first name, last name, e-mail address, telephone number | Article 6(1)(f) of the GDPR — processing for the purpose of pursuing the Controller's legitimate interest in analysing customer traffic on the service website. | Until you object to the processing of your personal data |
| Determination, pursuit and enforcement of claims and defence against claims in proceedings before courts and other state authorities | First name, last name, address, PESEL number, NIP, REGON, e-mail address, telephone number, IP number, bank account number, payment card number | Article 6(1)(f) of the GDPR — processing for the purpose of pursuing our legitimate interest in establishing, pursuing and enforcing claims. | Until the expiry of the limitation period for claims concerning the performance of the contract |
Voluntary provision of personal data
Provision of the required personal data is voluntary, but it is necessary for us to provide services to you (e.g. contact form).
Automated decision making (including profiling)
Your personal data will not be used for profiling or for automated decision making.
Will we transfer your personal data outside the EEA or to an international organisation?
In order to use Google tools for creating statistics, your personal data may be transferred to the United States, where Google LLC servers are located. Google LLC uses model data security contractual clauses approved by the European Commission.
What rights do you have with regard to our processing of your personal data?
Pursuant to the GDPR, you have the right to:
- request access to your personal data
- request rectification of your personal data
- request deletion of your personal data
- request that the processing of your personal data is restricted
- object to the processing of your personal data
- request transfer of your personal data
If you submit any of the above requests, without undue delay — and in any case within one month from receipt of the request — we will inform you of the actions taken. If necessary, we can extend the one-month period by another two months due to the complexity of the request or the number of requests.
Right of access to personal data (Article 15 of GDPR)
You have the right to be informed whether we are processing your personal data. If we do, you have the right to access your personal data and obtain information about the purposes of processing, categories of personal data processed, recipients, planned period of storage, your rights under the GDPR, and the right to lodge a complaint with the President of the Office for Personal Data Protection.
To request access to your personal data, please send your request to rodo@newstonepartners.com.
Right to correct your personal data (Article 16 of GDPR)
If your personal data are incorrect, you have the right to ask us to correct your personal data immediately. You also have the right to request that we supplement your personal data. Please send your request to rodo@newstonepartners.com.
Right to have your personal data deleted — "right to be forgotten" (Article 17 GDPR)
You have the right to request that your personal data be deleted when:
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you have withdrawn a specific consent;
- your personal data were processed illegally;
- you have raised objections to the processing of your personal data for the purposes of direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest.
Despite your request to delete your personal data, we may process your data further for the purpose of determining, pursuing or defending claims. Please send your request to rodo@newstonepartners.com.
Right to submit a request to restrict processing (Article 18 of GDPR)
You have the right to request restriction of the processing of your personal data when:
- you are questioning the correctness of your personal data;
- the processing of your data is unlawful;
- your personal data are no longer needed for the purposes of processing, but are needed to establish, pursue or defend your claims;
- you have objected to the processing of your personal data — until it is determined whether our legitimate interests take precedence.
Please send your request to rodo@newstonepartners.com.
Right to submit an objection (Article 21 of GDPR)
You have the right to object to the processing of your personal data at any time, including profiling, in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes resulting from legitimate interests pursued by the Controller. Please send your request to rodo@newstonepartners.com.
Right to request transfer of your personal data (Article 20 of GDPR)
You have the right to receive your personal data from us in a structured, commonly used machine-readable format and to send data to another personal data controller. As standard, we will provide your personal data in CSV format. Please send your request to rodo@newstonepartners.com.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or where the alleged infringement was committed.
In Poland, the supervisory authority within the definition of the GDPR is the President of the Office for the Protection of Personal Data (UODO), who replaced the GIODO as of 25 May 2018.
Cookies
General information
HTTP cookies, hereinafter referred to as cookies, are small text data files saved on your end-device while using the online service website. Their use is aimed at facilitating the operation of the online website. These files allow us to identify the software you are using and tailor our online service to your needs. Cookies usually contain the name of the domain from which they come, duration of their storage on the device and values assigned to them.
Safety
Cookies we use are safe for your devices. No viruses and no unwanted or malicious software can affect your devices via cookies.
Types of cookies
We use two types of cookies:
- Session cookies: stored and kept on your device until the web browser is closed. Saved information is then permanently deleted from the memory of your device. This mechanism does not allow the acquisition of any personal data or confidential information from your device.
- Persistent cookies: stored and kept on your device until deleted. Closing the web browser or switching off the device does not cause them to be removed from your device. This mechanism does not allow the acquisition of any personal data or confidential information from your device.
Aims
We also use cookies of external entities for the following purposes:
- online service configuration;
- to compile statistics which allow us to understand how users of the online service use online websites — via Google Analytics provided by Google Ireland Ltd. (registered in Ireland). Google's privacy policy is available here: https://policies.google.com/privacy.
You may change the cookie settings at any moment in the options of your web browser to specify conditions for storing such files and granting access to your device. Detailed information on the options and methods for handling cookies is available in the settings of your software (web browser).
Changes
The user will be informed about any changes to this Privacy Policy through the information on the home page of the website containing the list of changes and the date of their entry into force.